Internet of vehicles security authentication method, system and device

Abstract

The invention provides an Internet of Vehicles security authentication method, system and device, and the method comprises the steps: generating a private key and a certificate signature request signal in response to a preset command request signal; platform authentication is carried out on the basis of a prefabricated secret key and an Internet of Vehicles platform, and when the platform authentication is passed, the certificate signature request signal is sent to obtain a digital certificate from the Internet of Vehicles platform, and a prefabricated certificate is replaced according to the digital certificate; and performing terminal authentication with the Internet of Vehicles platform based on a preset protocol, and when the terminal authentication is passed, performing communication service with the Internet of Vehicles platform based on the private key and the digital certificate. According to the method provided by the invention, the security authentication of the vehicle-mounted terminal equipment and the vehicle networking platform is effectively realized, so that the data transmission of the vehicle-mounted terminal equipment does not need manual control, the information leakage risk is reduced, and the reliability and security of the data transmission of the vehicle-mounted terminal equipment are improved.

Description

Technical Field

[0001] The present application belongs to the field of vehicle networking communication technology, and specifically relates to a vehicle networking security authentication method, system and equipment. Background Art

[0002] At present, intelligent network products need to use more and more keys, and the keys need to be used in the production process of component suppliers. Therefore, how to ensure the high security of keys during generation, storage and use and prevent key leakage has become an industry problem. Information security in the Internet of Vehicles is of vital importance, affecting the future development and implementation of the Internet of Vehicles. There is a mismatch between terminal equipment and manufacturers, which cannot meet the authentication requirements for secure access to terminal vehicles, and does not ensure that the terminal equipment can dynamically update the initial security authentication information of the digital certificate. The transmission security of data for each terminal device depends on manual control, and there is a risk of information leakage. The data is obtained and used by hackers, which affects the safety of the vehicle. Summary of the invention

[0003] In order to solve the above technical problems, this application proposes a vehicle network security authentication method, system and equipment, which aims to provide security authentication for the connection between vehicle-mounted terminal equipment and the vehicle network platform, avoiding the risk of information leakage caused by relying on manual control.

[0004] Specifically, this application proposes a vehicle networking security authentication method, including:

[0005] In response to a preset command request signal, a private key and certificate signature request signal is generated.

[0006] The platform authentication is performed with the Internet of Vehicles platform based on the pre-made key. When the platform authentication is passed, the certificate signing request signal is sent to obtain a digital certificate from the Internet of Vehicles platform, and the pre-made certificate is replaced according to the digital certificate.

[0007] The terminal is authenticated with the Internet of Vehicles platform based on a preset protocol, and when the terminal authentication is passed, communication services are provided with the Internet of Vehicles platform based on the private key and the digital certificate.

[0008] In the above technical solution, the vehicle-mounted terminal device generates a private key and a digital certificate obtained from the vehicle-mounted networking platform by responding to a preset command request signal to communicate with the vehicle-mounted networking platform, thereby avoiding the risk of private key leakage during transmission. Through two-way authentication of platform authentication and terminal authentication, the security authentication of vehicle-mounted terminal devices and vehicle-mounted networking platform access is realized, and the reliability and security of vehicle-mounted terminal device authentication are improved. In the process of vehicle-mounted networking security authentication, a digital certificate is obtained by automatically issuing a certificate signature request, replacing a pre-made certificate, and performing security authentication with the vehicle-mounted networking platform, thereby avoiding the risk of information leakage caused by manual control.

[0009] As an implementation manner, generating a private key in response to a preset command request signal further includes:

[0010] The private key is encrypted by the encryption firmware and stored in the database. When the terminal authentication is passed, the private key is decrypted by calling the interface of the encryption firmware.

[0011] The private key is encrypted by the encryption firmware, which enhances the security of the private key and prevents the private key from being illegally accessed or leaked during storage. When the terminal authentication is passed, when the vehicle-mounted terminal device needs to use the private key, it is decrypted by calling the encryption firmware interface, thereby ensuring that the private key can only be accessed and used under legal operations, effectively reducing the risk of malicious attacks. The private key is obtained by calling the encryption firmware interface to decrypt, which avoids the exposure of the private key, thereby improving the security of the private key. Storing the private key in a database reduces the cost of private key storage.

[0012] Further, the sending of the certificate signing request signal to obtain a digital certificate from the Internet of Vehicles platform includes:

[0013] The certificate signing request signal is sent to a certificate issuing platform, a serial number is registered through the certificate issuing platform and sent to the Internet of Vehicles platform, so as to obtain a digital certificate from the Internet of Vehicles platform.

[0014] By registering the serial number through the certificate issuance platform and sending it to the Internet of Vehicles platform, the process of generating and obtaining digital certificates is simplified, the management complexity is reduced, and the secure communication between the Internet of Vehicles platform and the vehicle-mounted terminal device is ensured. By transmitting the serial number, the uniqueness of the digital certificate is ensured. The forgery and reuse of the same digital certificate are prevented, and the security of the digital certificate is improved.

[0015] Further, replacing the pre-made certificate according to the digital certificate includes:

[0016] The digital certificate is encoded according to a preset encoding rule, and the prefabricated certificate is replaced according to the encoded digital certificate; an activation signal is sent to the certificate issuance platform to activate the digital certificate.

[0017] The digital certificate is encoded by pre-set encoding rules, so that the format of the digital certificate complies with specific rules or encryption requirements, thereby improving the adaptability and security of the digital certificate. The digital certificate is activated by sending an activation signal to the certificate issuance platform, thereby ensuring the validity of the replaced digital certificate. The replacement and activation process of the digital certificate reduces errors caused by manual intervention and improves the efficiency of digital certificate management.

[0018] Furthermore, the Internet of Vehicles security authentication method further includes:

[0019] Digital certificates are obtained in batches from the certificate issuing platform through a public key infrastructure platform.

[0020] The current digital certificate status is detected according to a preset time interval to determine whether the current digital certificate has expired or whether the remaining validity period is less than a preset threshold. If so, a certificate update request is issued to the public key infrastructure platform to re-acquire the digital certificate to update the current digital certificate; otherwise, the current digital certificate is retained and the current digital certificate status continues to be detected according to the preset time interval.

[0021] By detecting the current digital certificate status at preset time intervals, the validity period of the current digital certificate is detected. When the current digital certificate has expired or the remaining validity period is less than the preset threshold, a certificate update request is automatically initiated, thereby avoiding manual intervention or neglect of digital certificate updates. This reduces communication failures or security risks caused by expired digital certificates and improves system reliability and stability.

[0022] Further, the sending of a certificate update request to the public key infrastructure platform to reacquire the digital certificate includes:

[0023] Determine whether the vehicle-mounted terminal device is connected to the public key infrastructure platform; if so, re-acquire the digital certificate from the public key infrastructure platform to update the current digital certificate; otherwise, issue a certificate update instruction to the communication component, and re-acquire the digital certificate from the public key infrastructure platform through the communication component to update the current digital certificate.

[0024] By judging whether the vehicle-mounted terminal device is connected to the public key infrastructure platform, corresponding measures can be taken in different connection states, ensuring the flexibility of digital certificate update in different situations. By timely updating the digital certificate, the timeliness and effectiveness of the digital certificate update are ensured.

[0025] Furthermore, the sending of a certificate update request to the public key infrastructure platform to re-acquire a digital certificate to update a current digital certificate further includes:

[0026] An activation request signal is sent to the certificate issuing platform through the public key infrastructure platform to activate the digital certificate.

[0027] By activating the digital certificate, it is ensured that the updated digital certificate can take effect in time, avoiding the potential safety hazards caused by the failure of the digital certificate to take effect. The efficiency and accuracy of digital certificate management are improved. By activating the digital certificate through the certificate issuance platform, the consistency and reliability of the digital certificate update process are ensured.

[0028] Based on the same inventive concept, the present application also proposes a system for a vehicle networking security authentication method, the system comprising:

[0029] The private key generation module is used to generate a private key and a certificate signature request signal in response to a preset command request signal.

[0030] The platform authentication module is used to perform platform authentication with the Internet of Vehicles platform based on the pre-made key. When the platform authentication is passed, the certificate signing request signal is sent to obtain a digital certificate from the Internet of Vehicles platform and replace the pre-made certificate according to the digital certificate.

[0031] And, a terminal authentication module is used to perform terminal authentication with the Internet of Vehicles platform based on a preset protocol. When the terminal authentication is passed, communication services are provided with the Internet of Vehicles platform based on the private key and digital certificate.

[0032] Furthermore, the system also includes a certificate update module;

[0033] The certificate updating module is used to detect the current digital certificate status and retain or update the current digital certificate based on the current digital certificate status.

[0034] Based on the same inventive concept, the present application also proposes a vehicle networking authentication device, which is configured with a vehicle networking security authentication system to implement the vehicle networking security authentication method.

[0035] Compared with the prior art, this application has at least the following beneficial effects:

[0036] The present application proposes a method, system and device for Internet of Vehicles security authentication, which provides an effective solution for the security authentication of the connection between the vehicle-mounted terminal device and the Internet of Vehicles platform. The vehicle-mounted terminal device generates a private key and a digital certificate obtained from the Internet of Vehicles platform in response to a preset command request signal to communicate with the Internet of Vehicles platform, thereby avoiding the risk of private key leakage during transmission. Through two-way authentication of platform authentication and terminal authentication, the security authentication of the access of the vehicle-mounted terminal device and the Internet of Vehicles platform is realized, and the reliability and security of the authentication of the Internet of Vehicles platform and the vehicle-mounted terminal device are improved. In the process of Internet of Vehicles security authentication, a digital certificate is obtained by automatically issuing a certificate signing request, replacing the pre-made certificate, and performing security authentication with the Internet of Vehicles platform, thereby avoiding the risk of information leakage caused by manual control. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 It is a flow chart of the vehicle network security authentication method shown in an embodiment of the present application.

[0038] Figure 2 This is a digital certificate update flow chart shown in an embodiment of the present application.

[0039] Figure 3 It is a schematic diagram of a vehicle networking security authentication system shown in an embodiment of the present application. DETAILED DESCRIPTION

[0040] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0042] Embodiment 1:

[0043] Please refer to Figure 1 Currently, the vehicle terminal equipment is pre-installed with pre-made keys and pre-made certificates. The vehicle network security authentication method mainly includes:

[0044] In response to a preset command request signal, a private key and a certificate signature request signal are generated. The preset command request signal may be a command request signal for generating a private key and obtaining a certificate signature request in a DID (Decentralized Identifier).

[0045] Based on the pre-made key, the platform authentication is performed with the Internet of Vehicles platform. When the platform authentication is passed, the certificate signature request signal is issued to obtain a digital certificate from the Internet of Vehicles platform, and the pre-made certificate is replaced according to the digital certificate. In the process of performing platform authentication with the Internet of Vehicles platform through the pre-made key, the certificate signature request signal can be issued to obtain a digital certificate from the Internet of Vehicles platform only when the platform authentication is passed. If the platform authentication is not passed, the digital certificate cannot be obtained. The security of the authentication with the Internet of Vehicles platform is ensured.

[0046] The terminal is authenticated with the Internet of Vehicles platform based on the preset protocol. When the terminal authentication is passed, the communication service is performed with the Internet of Vehicles platform based on the private key and digital certificate. The preset protocol can mainly be TLS1.2 (Transport Layer Security 1.2). The communication service is performed with the Internet of Vehicles platform based on the private key and digital certificate, wherein the private key does not flow out of the vehicle-mounted terminal device, thereby ensuring the high security of the private key.

[0047] In some embodiments, generating a private key in response to a preset command request signal further includes:

[0048] The private key is encrypted by the encryption firmware and stored in the database. When the terminal authentication is passed, the private key is obtained by calling the interface of the encryption firmware for decryption. Among them, when the vehicle-mounted terminal device uses the private key, it can only obtain the private key by calling the interface of the encryption firmware for decryption. The interface of the encryption firmware is used to avoid the exposure and leakage of the private key. The private key refuses to be copied manually to avoid the leakage of the private key due to human operation. AES (Advanced Encryption Standard) can be mainly used for encryption in the process of private key encryption.

[0049] Optionally, the sending of the certificate signing request signal to obtain a digital certificate from the Internet of Vehicles platform includes:

[0050] The certificate signing request signal is sent to a certificate issuing platform, a serial number is registered through the certificate issuing platform and sent to the Internet of Vehicles platform, so as to obtain a digital certificate from the Internet of Vehicles platform.

[0051] The certificate issuing platform may be mainly 509-CA Platform (509 Certificate Authority Platform), and the serial number is registered through the certificate issuing platform, thereby ensuring the uniqueness of the digital certificate. Those skilled in the art may select other certificate issuing platforms according to actual conditions, and are not limited thereto.

[0052] Optionally, replacing the pre-made certificate according to the digital certificate includes:

[0053] The digital certificate is encoded according to a preset encoding rule, the prefabricated certificate is replaced according to the encoded digital certificate, and an activation signal is sent to the certificate issuance platform to activate the digital certificate. The preset encoding rules may mainly include serial number encoding rules and csr (Certificate Signing Request) encoding rules. The serial number encoding rules may be that the serial number is 19 bytes, which respectively include the supplier code, the component code, the production date code and the production serial number, wherein the supplier code occupies 6 bytes, the component code occupies 4 bytes, the production date code occupies 4 bytes and the production serial number occupies 5 bytes. For example, it can be encoded as 50370011ADA5000000, 50370011A4A5000000.

[0054] Among them, the csr encoding rules mainly include the CN (Common Name), OU (Organizational Unit), O (Organization), L (Locality), ST (State) and C (Country) of the digital certificate. The RSA (Rivest-Shamir-Adleman) algorithm can be mainly used. For example, the csr encoding can be CN=*.desaysv.com, OU=IO, O=DesaySV, L=Huizhou, ST=Guangdong, C=CN.

[0055] Optionally, the Internet of Vehicles security authentication method further includes:

[0056] Digital certificates are obtained in batches from the certificate issuing platform via a public key infrastructure platform.

[0057] The current digital certificate status is detected according to a preset time interval to determine whether the current digital certificate has expired or whether the remaining validity period is less than a preset threshold. If so, a certificate update request is issued to the public key infrastructure platform to re-acquire the digital certificate to update the current digital certificate; otherwise, the current digital certificate is retained and the current digital certificate status continues to be detected according to the preset time interval.

[0058] The preset time interval can mainly be one hour, that is, the current digital certificate status is detected every hour. The technicians in this field can adjust the preset time interval according to the actual situation, which is not limited to this. The vehicle-mounted terminal device can mainly send a request to obtain the digital certificate status to the certificate update tool through the vehicle-mounted application in the domain controller, and check the local current digital certificate status through the certificate update tool and return it. The vehicle-mounted application can determine whether the current digital certificate has expired or whether the remaining validity period is less than the preset threshold, wherein the preset threshold can be 2 hours or 6 hours. The technicians in this field can select other preset thresholds according to the actual situation, which is not limited to this. When the current digital certificate has expired or the remaining validity period is less than 2 hours, the vehicle-mounted application sends a certificate update instruction to the certificate update tool to send a certificate update request to the public key infrastructure platform to obtain a new digital certificate to replace the current digital certificate.

[0059] When it is detected that the current digital certificate has not expired and the remaining validity period is greater than or equal to the preset threshold, the current digital certificate is retained and the current digital certificate status continues to be detected at preset time intervals.

[0060] Optionally, the issuing of a certificate update request to the public key infrastructure platform to reacquire a digital certificate includes:

[0061] Please refer to Figure 2 , determine whether the vehicle-mounted terminal device is connected to the public key infrastructure platform.

[0062] If so, the digital certificate is re-obtained from the public key infrastructure platform to update the current digital certificate.

[0063] Otherwise, a certificate update instruction is sent to the communication component, and the digital certificate is re-acquired from the public key infrastructure platform through the communication component to update the current digital certificate. The communication component can mainly be a Tbox (Telematics Box, vehicle-mounted telematics processing box) component. Those skilled in the art can select other communication components according to actual conditions, and are not limited to this.

[0064] Each time the vehicle-mounted terminal device is turned on, the current digital certificate is detected. If the current digital certificate has not expired and the validity period is greater than or equal to the preset threshold, the current digital certificate is retained and the status of the current digital certificate is detected at the preset time interval. Taking the case where it is detected that the current digital certificate has expired, and it is determined that the vehicle-mounted terminal device is not connected to the public key infrastructure platform, a certificate update instruction is sent to the Tbox component through the domain controller in the vehicle-mounted terminal device, and the Tbox application in the Tbox component sends a certificate update instruction to the certificate update tool in the Tbox component, and a certificate update request is sent to the public key infrastructure platform through the certificate update tool in the Tbox component to obtain a new digital certificate, and the new digital certificate is transmitted to the domain controller to update the current digital certificate.

[0065] Optionally, the sending of a certificate update request to the public key infrastructure platform to reacquire a digital certificate to update a current digital certificate further includes:

[0066] An activation request signal is sent to the certificate issuing platform through the public key infrastructure platform to activate the digital certificate.

[0067] After obtaining a new digital certificate from the public key infrastructure platform, the vehicle-mounted terminal device sends an activation request to the public key infrastructure platform, and the public key infrastructure platform transmits the activation request to the certificate issuance platform to activate the digital certificate, thereby ensuring that the digital certificate in the current vehicle-mounted terminal device is in a valid state.

[0068] Embodiment 2:

[0069] Please refer to Figure 3 The present application also proposes a system using the vehicle networking security authentication method described in Example 1, which mainly includes:

[0070] The private key generation module is used to generate a private key and a certificate signature request signal in response to a preset command request signal. In the vehicle-mounted terminal device, the private key and the certificate signature request signal can be generated by the RSA algorithm in response to the preset command request signal. After the private key is generated, the private key is encrypted by the encryption firmware and stored in the database, which can effectively reduce the storage cost of the private key. When the vehicle-mounted terminal device uses the private key, the private key is obtained by decrypting the interface of the encryption firmware, thereby avoiding the security risks caused by the leakage of the private key.

[0071] The platform authentication module is used to perform platform authentication with the Internet of Vehicles platform based on the pre-made key. When the platform authentication is passed, the certificate signature request signal is issued to obtain a digital certificate from the Internet of Vehicles platform and replace the pre-made certificate according to the digital certificate. The pre-made key and pre-made certificate are pre-installed in the vehicle terminal device. During the platform authentication process, the Internet of Vehicles platform will authenticate the pre-made key to verify the identity of the vehicle terminal device and ensure the legitimacy of the vehicle terminal device. After the platform authentication is passed, the certificate signature request signal is issued to the certificate issuing platform, and the serial number is registered by the certificate issuing platform and transmitted to the Internet of Vehicles platform to obtain a digital certificate from the Internet of Vehicles platform.

[0072] And, a terminal authentication module is used to perform terminal authentication with the Internet of Vehicles platform based on a preset protocol. When the terminal authentication is passed, communication services are performed with the Internet of Vehicles platform based on the private key and digital certificate. When performing terminal authentication, the TLS1.2 protocol can be mainly used to perform terminal authentication with the Internet of Vehicles platform. Only after passing the terminal authentication can communication services be performed with the Internet of Vehicles platform based on the private key and digital certificate. When the terminal authentication fails, communication services with the Internet of Vehicles platform cannot be performed through the private key and digital certificate, and the vehicle-mounted terminal device needs to re-perform terminal authentication.

[0073] Optionally, the system further comprises a certificate updating module;

[0074] The certificate updating module is used to detect the current digital certificate status and retain or update the current digital certificate based on the current digital certificate status.

[0075] When the vehicle-mounted terminal device performs communication services with the Internet of Vehicles platform based on the private key and digital certificate, the digital certificates are obtained in batches from the certificate issuance platform through the public key infrastructure platform. The vehicle-mounted terminal device detects the current digital certificate status according to a preset time interval, and the current digital certificate status can at least include expired, the remaining validity period is less than a preset threshold, and the remaining validity period is greater than or equal to the preset threshold. When the current digital certificate status is expired or the remaining validity period is less than the preset threshold, a new digital certificate is re-obtained from the public key infrastructure platform to replace the current digital certificate. After replacing the current digital certificate, an activation request signal is sent to the certificate issuance platform through the public key infrastructure platform to activate the digital certificate to ensure that the updated current digital certificate is in an activated and valid state. When the current digital certificate status is that the remaining validity period is greater than or equal to the preset threshold, the current digital certificate is retained and the current digital certificate status continues to be detected at preset time intervals.

[0076] The certificate update module is also used to determine whether the vehicle-mounted terminal device is connected to the public key infrastructure platform. When the vehicle-mounted terminal device is connected to the public key infrastructure platform, a certificate update request is directly issued to the public key infrastructure platform to obtain a new digital certificate; when the vehicle-mounted terminal device is not connected to the public key infrastructure platform, a certificate update instruction is issued to the communication component, and a certificate update request is issued through the communication component to the public key infrastructure platform to obtain a new digital certificate to update the current digital certificate.

[0077] Embodiment three:

[0078] The present application also proposes a vehicle networking authentication device, which is configured with a vehicle networking security authentication system to implement the vehicle networking security authentication method as described in Example 1.

[0079] In the Internet of Vehicles authentication device, the private key generation module, platform authentication module and terminal authentication module in the Internet of Vehicles security authentication system can be configured. Through the collaborative work of the above modules, through the two-way authentication of platform authentication and terminal authentication, the security authentication of the vehicle-mounted terminal device and the Internet of Vehicles platform can be realized. A key storage device and a certificate management device can also be configured in the Internet of Vehicles authentication device. The generated private key is encrypted and stored by the key storage device. When the vehicle-mounted terminal device needs to use the private key, the private key is decrypted by calling the interface of the key storage device, thereby ensuring the security of the private key. When the vehicle-mounted terminal device communicates with the Internet of Vehicles platform, the status of the effective digital certificate in the vehicle-mounted terminal device is detected by the certificate management device, so that the digital certificate in the vehicle-mounted terminal device is replaced in time when it expires, ensuring the validity of the digital certificate in the vehicle-mounted terminal device and avoiding security risks caused by the expiration of the digital certificate.

[0080] In summary, the vehicle networking security authentication method, system and device proposed in this application provide an effective solution for the security authentication of the connection between the vehicle-mounted terminal device and the vehicle networking platform. The vehicle-mounted terminal device generates a private key and a digital certificate obtained from the vehicle networking platform in response to a preset command request signal to communicate with the vehicle networking platform, thereby avoiding the risk of private key leakage during transmission. Through two-way authentication of platform authentication and terminal authentication, the security authentication of the access of the vehicle-mounted terminal device and the vehicle networking platform is realized, and the reliability and security of the authentication of the vehicle networking platform and the vehicle-mounted terminal device are improved. In the process of vehicle networking security authentication, a digital certificate is obtained by automatically issuing a certificate signing request, replacing the pre-made certificate, and performing security authentication with the vehicle networking platform, thereby avoiding the risk of information leakage caused by manual control.

[0081] In several embodiments provided in the present application, it is understood that each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved.

[0082] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling an electronic device to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0083] The specific embodiments described above further describe the purpose, technical solutions and beneficial effects of the present application in detail. It should be understood that the above description is only a specific embodiment of the present application and is not intended to limit the scope of protection of the present application. It is particularly pointed out that for those skilled in the art, any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of protection of the present application.

Claims

1. A vehicle network security authentication method, characterized in that: The current vehicle terminal equipment is pre-installed with a pre-made key and a pre-made certificate. The vehicle network security authentication method includes: generating a private key and a certificate signature request signal in response to a preset command request signal; Performing platform authentication with the Internet of Vehicles platform based on the pre-made key, and when the platform authentication is passed, issuing the certificate signing request signal to obtain a digital certificate from the Internet of Vehicles platform, and replacing the pre-made certificate according to the digital certificate; The terminal is authenticated with the Internet of Vehicles platform based on a preset protocol, and when the terminal authentication is passed, communication services are provided with the Internet of Vehicles platform based on the private key and the digital certificate.

2. The vehicle network security authentication method according to claim 1, characterized in that: The generating of a private key in response to a preset command request signal further comprises: Encrypting the private key by encryption firmware and storing it in a database; When the terminal passes the authentication, the private key is obtained by calling the interface of the encryption firmware for decryption.

3. The vehicle network security authentication method according to claim 1, characterized in that: The sending of the certificate signing request signal to obtain a digital certificate from the Internet of Vehicles platform includes: Sending the certificate signing request signal to a certificate issuing platform; The serial number is registered through the certificate issuing platform and sent to the Internet of Vehicles platform to obtain a digital certificate from the Internet of Vehicles platform.

4. The vehicle network security authentication method according to claim 1, characterized in that: The replacing of the pre-made certificate according to the digital certificate comprises: Encode the digital certificate according to a preset encoding rule, and replace the prefabricated certificate with the encoded digital certificate; An activation signal is sent to the certificate issuing platform to activate the digital certificate.

5. The vehicle network security authentication method according to claim 3, characterized in that: The Internet of Vehicles security authentication method further includes: Obtaining digital certificates in batches from the certificate issuing platform via a public key infrastructure platform; Detecting the current digital certificate status according to a preset time interval, determining whether the current digital certificate has expired or whether the remaining validity period is less than a preset threshold, and if so, issuing a certificate update request to the public key infrastructure platform to re-acquire the digital certificate to update the current digital certificate; Otherwise, the current digital certificate is retained and the current digital certificate status continues to be detected at preset time intervals.

6. The vehicle network security authentication method according to claim 5, characterized in that: The sending of a certificate update request to the public key infrastructure platform to reacquire a digital certificate comprises: Determining whether the vehicle-mounted terminal device is connected to the public key infrastructure platform; If yes, re-obtaining the digital certificate from the public key infrastructure platform to update the current digital certificate; Otherwise, a certificate update instruction is sent to the communication component, and the digital certificate is re-acquired from the public key infrastructure platform through the communication component to update the current digital certificate.

7. The vehicle network security authentication method according to claim 5, characterized in that: The sending of a certificate update request to the public key infrastructure platform to re-acquire a digital certificate to update the current digital certificate also includes: An activation request signal is sent to the certificate issuing platform through the public key infrastructure platform to activate the digital certificate.

8. A system based on the vehicle network security authentication method according to any one of claims 1 to 7, characterized in that: include: A private key generation module, used to generate a private key and a certificate signature request signal in response to a preset command request signal; A platform authentication module, used for performing platform authentication with the Internet of Vehicles platform based on a pre-made key, and when the platform authentication is passed, sending the certificate signing request signal to obtain a digital certificate from the Internet of Vehicles platform, and replacing the pre-made certificate according to the digital certificate; And, a terminal authentication module is used to perform terminal authentication with the Internet of Vehicles platform based on a preset protocol. When the terminal authentication is passed, communication services are provided with the Internet of Vehicles platform based on the private key and digital certificate.

9. The system of the vehicle network security authentication method according to claim 8, characterized in that: The system also includes a certificate update module; The certificate updating module is used to detect the current digital certificate status and retain or update the current digital certificate based on the current digital certificate status.

10. A vehicle networking authentication device, characterized in that: The Internet of Vehicles authentication device is configured with an Internet of Vehicles security authentication system to implement the Internet of Vehicles security authentication method as described in any one of claims 1-7.

Images